CVE-2026-72587: CVE-2026-72587: güvenlik açığı

Açıklama (NVD)

A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /_instatic/hole/<nodeId> server island endpoint.

Özet bilgiler

CVSS v3.1

6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

%0,32 (yüzdelik 25)

CWE

CWE-444

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• CWE-444